Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Security Engineer role.

Rezi rewrites your resume against Legatics's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Engineer posting at Legatics — free, in seconds.

About the Role

Legatics is seeking a Security Engineer to secure its platform, cloud estate, and internal systems. This role involves application and product security, cloud, identity, and endpoint security, as well as security monitoring and detection. The engineer will also lead incident response and contribute to AI security strategies. For the first year, the role includes ownership of ISO 27001 compliance and client assurance work, supported by AI tooling.

Responsibilities

Carry out technical risk assessments on new and existing product features, including permissions and access control design.
Embed security into our software development lifecycle through threat modelling, secure code review and security requirements for new features.
Perform vulnerability and exploitability analysis, including CVE triage and dependency risk, and prioritise remediation with engineers based on real exposure.
Operate and consolidate our security scanning and posture tooling, and centralise findings so they are tracked and resolved.
Review the security risk of proposed integrations and data flows, including third-party tools and automations.
Run a programme of continuous security testing, including penetration tests, and own remediation of findings.
Audit and harden our cloud and identity posture, including SSO enforcement, conditional access and third-party app controls.
Automate joiner and leaver access, and run periodic user access reviews across our SaaS estate.
Own email security and authentication.
Own endpoint security across our Windows and Mac fleet, including EDR policy tuning and validation testing.
Design and maintain federated authentication with clear rollout guides and rollback procedures.
Build, extend and maintain security monitoring across our technical estate, including log aggregation, correlation and alerting.
Tune detection rules and alerting to improve signal quality and reduce false positives.
Maintain threat intelligence and security news pipelines to keep the team informed.
Lead detection, triage, containment and response for security incidents, including supply-chain compromises affecting third-party tools.
Assess blast radius, advise on practical containment and maintain escalation and breach procedures.
Write clear incident communications for technical and non-technical audiences, including clients where needed.
Shape our AI security posture, positioning security as an enabler for teams building with AI and agentic tools.
Implement access controls, secrets scanning and detection for internal AI systems and MCP integrations, mapped to frameworks such as the OWASP Top 10 for Agentic Applications.
Research AI coding risks, such as slopsquatting and hallucinated packages, and feed findings into engineering practice.
Own our ISO 27001:2022 certified ISMS, including the risk register, Statement of Applicability, policies and audit evidence, and preparation for surveillance audits.
Manage client information security questionnaires and security queries from our commercial team, using AI tooling.
Handle client conversations about our security posture and remediation updates.
Contribute technical controls, evidence and expertise to our ISMS and client assurance work.
Support day-to-day IT and tooling needs, including connector provisioning, access permissions and IAM configuration for internal data tools.

Requirements

Hands-on experience in a security engineering, application security or cloud security role.
Strong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design.
Practical experience of vulnerability management, from triage to working with engineers on remediation.
Hands-on experience securing major cloud, workspace and identity platforms, including SSO and conditional access.
Experience with security monitoring, log analysis and SIEM or observability tooling.
Experience of investigating and responding to security incidents.
Comfortable reading and writing code or scripts (for example Python, TypeScript or Bash) to automate security work.
Clear communication skills, able to influence engineers and explain risk to non-technical colleagues and clients.
Experience with EDR tooling.
Working knowledge of ISO 27001, including audit evidence and client security questionnaires.
An interest in, or experience of, AI and agentic security risks.
A software engineering background.
Experience in a startup or scale-up environment.

Skills

Application Security
Cloud Security
Identity and Access Management (IAM)
Security Monitoring
Incident Response
AI Security
ISO 27001
Vulnerability Management
Threat Modelling
Secure Code Review
Penetration Testing
Cloud Platforms (e.g., AWS, Azure, GCP)
SSO
Conditional Access
SIEM
Observability Tooling
Python
TypeScript
Bash
EDR Tooling

Location

London, UK

Work Type

Permanent
Hybrid

Experience Level

Mid-level

Benefits

25 days holiday per year (plus public holidays)
Early Finish Fridays
Pension with NEST
Private Medical Insurance with Bupa
Healthshield Health Cash Plan
Personal Learning & Development budget
Access to Mental healthcare for you and your immediate family
Enhanced parental leave policies
Opportunities for accelerated professional development and career progression
Supportive and talented team environment
Warm, genuinely collaborative culture
Regular socials

About the Company

Legatics is one of the world's leading LegalTech scale-ups.
Our legal transaction management platform enables law firms and their clients to collaborate on and close deals in an interactive online environment, providing clarity, reducing risk and saving time.
Our customers include some of the world's top law firms, such as A&O Shearman, Hogan Lovells, Herbert Smith Freehills and King & Wood Mallesons.
Legatics has been used on transactions in more than 60 countries, worth over $1 trillion.

Equal Opportunity

We don’t discriminate against gender, race, religion or belief, disability, age, marital status or sexual orientation.
Whatever your background may be, we welcome anyone with talent, drive and emotional intelligence.
We're committed to building a diverse team and are constantly looking for ways to improve our processes to help us do that.